ModSecurity - Failed to access DBM file "/opt/application/spectrum/apache/tmp/ip": Permission denied

Document ID : KB000095247
Last Modified Date : 09/05/2018
Show Technical Document Details
Question:
After the implementation of Modsecurity we found an error in the  $SPECROOT/apache/logs/error_log.

"ModSecurity: collections_remove_stale: Failed to access DBM file "/opt/application/spectrum/apache/tmp/ip": Permission denied"

What can we do to fix it?
Environment:
Spectrum  10.2.1
Redhat  6.5
 
Answer:
Start the Apache process httpd as spectrum install owner, instead of root.
Additional Information:
Enable ModSecurity Web Application Firewall

https://docops.ca.com/ca-spectrum/10-1-to-10-1-2/en/administrating/oneclick-administration/oneclick-server-communications-and-network-configuration/enable-modsecurity-web-application-firewall